$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft File: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft (raw, json) Hash identifier: rTgOVKyPHiFUuFJdXcig+mxO/y+0vEtZhB0EF1vs/X8= Subject key identifier: 43:54:5B:9B:7E:14:BB:47:40:A8:5D:C2:D4:B6:D7:14:BC:E3:6B:57 Authority key identifier: CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F Certificate issuer: /CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Certificate serial: 43779E26174CED857760E0A70828AB7AE87B0FC7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft Manifest number: 01DF Signing time: Thu 23 Jul 2026 21:28:47 +0000 Manifest this update: Thu 23 Jul 2026 21:23:47 +0000 Manifest next update: Fri 24 Jul 2026 23:26:47 +0000 Files and hashes: 1: 326131343a373538303a666637653a3a2f34382d3438203d3e20323033393135.roa (hash: pc5v6qtoIv5YaFeB01kPphqJyZS0iflHilTdG3JkLMM=) 2: 326131343a373538303a666637333a3a2f34382d3438203d3e20323033393135.roa (hash: +raeShoeu82SK61p+CeGEiQBGb2nYgWjmH84XKpFNFY=) 3: 326131343a373538303a666637353a3a2f34382d3438203d3e20323033393135.roa (hash: edWg8eVKPrPOKjy0IkXAinCPcIVKlmM6kiuxaUVH3dI=) 4: 326131343a373538303a666637623a3a2f34382d3438203d3e20323033393135.roa (hash: 8og23EO/3Ia44WrUwjHaKKbFmQpT/jNLPSJPJq4zzQo=) 5: 326131343a373538303a666637373a3a2f34382d3438203d3e20323033393135.roa (hash: 6+PbaU8J60OL7OlHqP0ZbtwAw8SVxx8dyJJBJqDbxFc=) 6: 326131343a373538303a666637303a3a2f34382d3438203d3e20323033393135.roa (hash: /TSCFxq1k6Mu748jZoN0Eo5Sjpn+cziXXXUhsucoLNg=) 7: 326131343a373538303a666637383a3a2f34382d3438203d3e20323033393135.roa (hash: gsIwpY245j8fIC94LqkPJHGZjyAqBYlxII7NePgbZ4Y=) 8: 326131343a373538303a666637393a3a2f34382d3438203d3e20323033393135.roa (hash: pYAR74KeV/ydFt3H/yMvWyWHHe92bO+vR47SO89EW90=) 9: 326131343a373538303a666637343a3a2f34382d3438203d3e20323033393135.roa (hash: 7OcMgtiJjOUp4vbH335wtUn8wWl9Q5s9aOGp4rOAn9U=) 10: 326131343a373538303a666637613a3a2f34382d3438203d3e20323033393135.roa (hash: lVFPEuT+Vv7EHAhCsqJ2Rg8eFP3usNSJ0TffuGmsFKE=) 11: 326131343a373538303a666637363a3a2f34382d3438203d3e20323033393135.roa (hash: cLUSerzV/UxTz2t/TpAz/cwOxeJF4/5nsCmTzKx4J7I=) 12: CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl (hash: 3uRlu+afk0o/nX24fb/bq9/rrUGV5C1PRkDHlB1pO6Y=) 13: 326131343a373538303a666637633a3a2f34382d3438203d3e20323033393135.roa (hash: oYu59g7cKHhApVpkgqRTnw9jfrdNbp5kP9+u0to/GDc=) 14: 326131343a373538303a666637663a3a2f34382d3438203d3e20323033393135.roa (hash: eyQ+EXgpe7ogjkdUwWOMZF84NoStyr6kSLUk4hmsjiU=) 15: 326131343a373538303a666637323a3a2f34382d3438203d3e20323033393135.roa (hash: +fGGZrWlnfQQmOHh82cPjXI/AqO47/pYdQ2wNZ+KDek=) 16: 326131343a373538303a666637313a3a2f34382d3438203d3e20323033393135.roa (hash: Fqd3S2MbsOHclWEZXlewpnT8bnKZVvDGIgL3ze+YoHU=) 17: 326131343a373538303a666637643a3a2f34382d3438203d3e20323033393135.roa (hash: ZdaCYsoHSSWR/I5PfpXTEC74LAUCu/IQxWtNDjeYaUc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:77:9e:26:17:4c:ed:85:77:60:e0:a7:08:28:ab:7a:e8:7b:0f:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F Validity Not Before: Jul 23 21:23:47 2026 GMT Not After : Jul 24 23:26:47 2026 GMT Subject: CN=43545B9B7E14BB4740A85DC2D4B6D714BCE36B57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:01:a7:9c:5d:62:57:af:77:d8:62:8e:a6:39: 9b:73:a1:1d:aa:ec:04:3c:e8:9c:6c:f1:cc:b5:60: 9c:ee:a0:7e:f9:3f:7e:e8:47:3d:16:0e:38:03:74: b0:23:7b:ec:f1:0e:02:85:2c:0b:72:be:49:1d:2d: 96:d0:17:34:de:0c:46:5e:dc:38:7d:c4:7e:fc:3a: a0:f3:9f:79:9d:68:6f:d4:51:06:28:41:d7:0a:a2: 41:1d:c9:9b:dc:c7:e9:30:29:00:82:bf:43:31:dc: 64:07:84:06:36:63:03:5b:ea:1a:81:f1:00:20:e0: ec:9e:c3:66:3c:34:4b:2d:58:51:83:96:c1:94:3a: a2:b8:96:11:8c:14:83:d6:ac:8b:df:a9:e0:43:e1: 18:b5:b6:54:0d:25:0a:a2:90:58:54:4c:2c:72:d2: 62:75:ec:f2:e5:4e:10:c2:ab:46:d5:a5:c2:7d:84: 86:4f:2f:61:b7:30:b6:9f:42:60:99:72:d9:fb:81: b4:cc:83:85:d6:e9:7d:a8:79:e8:1a:52:fa:b7:8e: 52:0c:a7:ce:a3:d8:79:1a:83:2e:d1:5d:c7:bb:34: 2f:a9:1e:1b:e1:a8:12:a5:f8:ce:ed:3a:0a:4b:42: 4c:76:40:f2:6c:f7:10:13:4f:3e:84:06:22:0c:af: 1b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:54:5B:9B:7E:14:BB:47:40:A8:5D:C2:D4:B6:D7:14:BC:E3:6B:57 X509v3 Authority Key Identifier: keyid:CC:79:1A:1F:5C:B3:BB:2C:AF:7C:28:38:21:12:E2:69:BF:1D:0F:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7a0aa56-4a1d-4ba8-ab66-c59fed4c37fc/1/CC791A1F5CB3BB2CAF7C28382112E269BF1D0F2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:b0:fb:c0:0a:b4:8c:e2:78:bd:ea:25:92:95:2f:22:3c:93: 18:12:4a:a5:08:a2:12:79:45:6f:78:1c:ab:25:b7:25:25:93: 26:a4:93:a2:4c:32:b5:18:15:fa:74:50:63:00:fa:5a:3b:44: d0:fd:14:b4:53:98:cc:08:e0:73:be:f3:95:19:8e:02:11:b0: 95:38:ac:ba:86:d7:92:5b:af:cd:a3:fb:84:d2:26:d9:60:c1: cc:81:c5:60:51:d2:c2:a5:84:37:21:00:ed:66:fb:34:f7:c9: 00:9e:5d:67:1f:55:e4:7d:be:2b:c6:48:64:84:ae:9c:3c:32: 24:be:e6:5b:91:0f:4f:aa:dd:d2:77:f7:d9:e4:19:96:09:2d: ae:8f:03:e2:d6:48:c3:d2:96:a8:17:b3:4f:9e:20:d8:60:56: 5d:21:6c:7a:70:55:9f:9f:43:2a:a1:7c:cd:2e:e3:30:2d:27: e8:9f:29:97:7d:02:8b:34:8a:c4:d1:60:1e:50:d8:f1:94:91: 60:72:ca:10:0a:34:d7:35:5c:62:d2:13:67:41:6c:af:ff:68: e8:17:07:79:84:34:67:df:5b:f2:dc:58:73:1d:1e:6f:91:23: bc:90:fa:a2:40:76:e6:0a:fc:4e:82:99:ed:13:16:9d:16:15: 6b:2a:d9:6a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUQ3eeJhdM7YV3YOCnCCireuh7D8cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlC RjFEMEYyRjAeFw0yNjA3MjMyMTIzNDdaFw0yNjA3MjQyMzI2NDdaMDMxMTAvBgNV BAMTKDQzNTQ1QjlCN0UxNEJCNDc0MEE4NURDMkQ0QjZENzE0QkNFMzZCNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPAaecXWJXr3fYYo6mOZtzoR2q 7AQ86Jxs8cy1YJzuoH75P37oRz0WDjgDdLAje+zxDgKFLAtyvkkdLZbQFzTeDEZe 3Dh9xH78OqDzn3mdaG/UUQYoQdcKokEdyZvcx+kwKQCCv0Mx3GQHhAY2YwNb6hqB 8QAg4Oyew2Y8NEstWFGDlsGUOqK4lhGMFIPWrIvfqeBD4Ri1tlQNJQqikFhUTCxy 0mJ17PLlThDCq0bVpcJ9hIZPL2G3MLafQmCZctn7gbTMg4XW6X2oeegaUvq3jlIM p86j2Hkagy7RXce7NC+pHhvhqBKl+M7tOgpLQkx2QPJs9xATTz6EBiIMrxsfAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUQ1Rbm34Uu0dAqF3C1LbXFLzja1cwHwYDVR0j BBgwFoAUzHkaH1yzuyyvfCg4IRLiab8dDy8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjdhMGFhNTYtNGExZC00YmE4LWFiNjYtYzU5ZmVkNGMz N2ZjLzEvQ0M3OTFBMUY1Q0IzQkIyQ0FGN0MyODM4MjExMkUyNjlCRjFEMEYyRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9DQzc5MUExRjVDQjNCQjJDQUY3QzI4Mzgy MTEyRTI2OUJGMUQwRjJGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2I3YTBhYTU2LTRhMWQtNGJhOC1hYjY2LWM1OWZlZDRjMzdmYy8xL0NDNzkxQTFG NUNCM0JCMkNBRjdDMjgzODIxMTJFMjY5QkYxRDBGMkYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQArsPvA CrSM4ni96iWSlS8iPJMYEkqlCKISeUVveByrJbclJZMmpJOiTDK1GBX6dFBjAPpa O0TQ/RS0U5jMCOBzvvOVGY4CEbCVOKy6hteSW6/No/uE0ibZYMHMgcVgUdLCpYQ3 IQDtZvs098kAnl1nH1Xkfb4rxkhkhK6cPDIkvuZbkQ9Pqt3Sd/fZ5BmWCS2ujwPi 1kjD0paoF7NPniDYYFZdIWx6cFWfn0MqoXzNLuMwLSfonymXfQKLNIrE0WAeUNjx lJFgcsoQCjTXNVxi0hNnQWyv/2joFwd5hDRn31vy3FhzHR5vkSO8kPqiQHbmCvxO gpntExadFhVrKtlq -----END CERTIFICATE-----Generated at Fri Jul 24 14:19:55 2026 by rpki-client